$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaab763c-76dd-33fa-b5c1-63358270ca4b.roa File: aaab763c-76dd-33fa-b5c1-63358270ca4b.roa (raw, json) Hash identifier: hjxeo203eKx051XFxeCpfN4d8/shgR31X7BDqeIPlak= Subject key identifier: 7F:27:E5:74:B6:E6:68:B7:4D:62:B6:AE:3C:00:A9:31:D5:F0:3F:46 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B2049BDD2CBA51498C9FE16C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaab763c-76dd-33fa-b5c1-63358270ca4b.roa Signing time: Mon 08 Sep 2025 12:02:09 +0000 ROA not before: Mon 08 Sep 2025 12:02:09 +0000 ROA not after: Sun 07 Dec 2025 13:02:09 +0000 asID: 56264 IP address blocks: 72.244.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:49:bd:d2:cb:a5:14:98:c9:fe:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 12:02:09 2025 GMT Not After : Dec 7 13:02:09 2025 GMT Subject: CN=09af4983-d1d2-4e9a-83df-5015cfceabf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:a5:0d:ea:e5:31:7b:bc:3b:58:72:ff:92: 48:7f:a1:ee:bd:6a:01:1d:02:7e:de:9d:0a:9a:4b: 8d:6c:b6:a3:40:f9:8d:cc:57:3a:8f:e9:ec:12:3f: bc:ec:24:b3:25:2f:bf:74:ff:7a:87:41:c0:15:3d: 45:90:c7:4b:be:a2:74:ed:9b:d6:fa:61:86:c8:01: a1:d1:a7:54:f9:29:27:09:15:b4:e6:23:77:75:97: e1:3f:c6:a8:d3:27:0d:1d:27:13:8b:03:0a:65:3e: 16:d0:e5:8c:16:98:d2:e6:58:f1:34:4a:b3:fd:df: 52:fd:36:b8:ac:3e:c0:6a:a6:07:6d:36:44:ae:10: fe:32:26:0f:ff:bf:04:03:1d:4d:ee:a9:50:5c:37: f8:1c:54:84:a3:3c:80:43:15:3e:91:72:19:f2:cb: be:60:9e:49:01:e1:aa:be:fc:a6:b3:e1:37:d7:e5: 6e:70:f1:b1:f5:63:89:20:47:49:78:f1:97:b7:57: 0d:aa:0e:ea:62:37:4d:e7:78:d5:31:44:0b:f6:d3: c8:87:31:15:17:92:2a:32:26:fd:17:0d:36:b6:74: 41:c7:22:13:60:28:3f:e1:28:42:22:b3:b3:ea:8a: ed:cb:82:87:13:4f:47:75:46:56:cf:83:ae:b8:38: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:27:E5:74:B6:E6:68:B7:4D:62:B6:AE:3C:00:A9:31:D5:F0:3F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaab763c-76dd-33fa-b5c1-63358270ca4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:db:d3:ed:5c:fa:5f:c6:e3:ca:39:cf:98:21:b9:4c:04:dd: 44:13:ea:26:ef:da:c7:7d:45:64:32:c1:d9:98:d9:2d:6d:1c: 0f:9f:59:4c:15:ba:7f:0b:1a:78:89:0c:bb:c2:dc:1b:c0:97: 5a:50:50:2c:ac:7b:7c:a4:ee:4e:bd:1b:0f:78:8a:63:8d:fb: 54:ee:69:e5:c9:75:e6:32:8e:09:17:83:2d:0f:e9:5b:57:a5: d3:ab:33:6b:ba:f4:71:c1:27:35:d5:c4:7a:b1:ff:74:81:79: 64:cc:0d:f6:dc:2d:72:39:7d:70:29:03:be:0d:5c:cb:58:73: d5:34:ec:eb:f6:57:6a:6b:41:31:c8:66:d2:85:0d:db:89:51: a3:0e:cf:6d:1d:a9:97:3d:f5:58:9e:bf:f4:0e:9c:5a:ab:62: 43:3c:4e:d0:4b:4e:04:c7:1e:4b:6c:6f:62:40:f0:d6:fc:24: 20:50:df:5f:33:7b:aa:7c:cb:8c:48:62:8d:35:f7:2a:71:e3: 3c:9e:ae:77:ae:09:5e:48:a3:92:77:c2:51:f5:67:a0:6b:5b: 23:b2:6f:29:b3:91:8c:59:75:16:8b:27:a4:99:24:e7:10:09: ee:64:13:b7:25:59:fe:f4:b5:0a:0a:fa:40:f6:bb:fc:98:37: f1:f0:2b:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgSb3Sy6UUmMn+FsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODEyMDIwOVoXDTI1MTIwNzEzMDIwOVowLzEtMCsGA1UEAxMk MDlhZjQ5ODMtZDFkMi00ZTlhLTgzZGYtNTAxNWNmY2VhYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthelDerlMXu8O1hy/5JIf6HuvWoBHQJ+3p0K mkuNbLajQPmNzFc6j+nsEj+87CSzJS+/dP96h0HAFT1FkMdLvqJ07ZvW+mGGyAGh 0adU+SknCRW05iN3dZfhP8ao0ycNHScTiwMKZT4W0OWMFpjS5ljxNEqz/d9S/Ta4 rD7AaqYHbTZErhD+MiYP/78EAx1N7qlQXDf4HFSEozyAQxU+kXIZ8su+YJ5JAeGq vvyms+E31+VucPGx9WOJIEdJePGXt1cNqg7qYjdN53jVMUQL9tPIhzEVF5IqMib9 Fw02tnRBxyITYCg/4ShCIrOz6orty4KHE09HdUZWz4OuuDjjXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8n5XS25mi3TWK2rjwAqTHV8D9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWFhYjc2M2MtNzZkZC0z M2ZhLWI1YzEtNjMzNTgyNzBjYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvb0+1c+l/G48o5z5ghuUwE3UQT6ibv2sd9RWQywdmY2S1tHA+fWUwV un8LGniJDLvC3BvAl1pQUCyse3yk7k69Gw94imON+1TuaeXJdeYyjgkXgy0P6VtX pdOrM2u69HHBJzXVxHqx/3SBeWTMDfbcLXI5fXApA74NXMtYc9U07Ov2V2prQTHI ZtKFDduJUaMOz20dqZc99Viev/QOnFqrYkM8TtBLTgTHHktsb2JA8Nb8JCBQ318z e6p8y4xIYo019ypx4zyerneuCV5Io5J3wlH1Z6BrWyOybymzkYxZdRaLJ6SZJOcQ Ce5kE7clWf70tQoK+kD2u/yYN/HwK7Q= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:09 2025 by rpki-client